Cb Response - Uninstall Cb Sensor - superseded
Log In or Register to download the BES file, and more.

0 Votes

Versioning - This is an older version.

1Cb Response - Uninstall Cb Sensor 9/16/2016 11:50:42 AM
2Cb Response - Uninstall Cb Sensor 8/23/2017 7:53:31 AM

Description

This Fixlet will allow you to uninstall the Carbon Black Response Sensor.

Property Details

ID21665
StatusProduction - Fully Tested and Ready for Production
TitleCb Response - Uninstall Cb Sensor
DomainBESC
CategoryTroubleshooting
SourceCarbon Black
Source SeverityN/A
Source Release Date1/21/2016 12:00:00 AM
KeywordsIBM BigFix & Carbon Black Integration Content
Added by on 9/16/2016 11:50:42 AM
Last Modified by on 9/16/2016 11:50:42 AM
Counters 8816 Views / 135 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Relevance

Used in 77 fixlets and 6 analyses   * Results in a true/false
Show indented relevance
version of client >= "9.0"
Used in 2 fixlets   * Results in a true/false
Show indented relevance
if (windows of operating system) then (exists keys whose (value "DisplayName" of it = "Carbon Black Sensor") of key "HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall" of registry) else if (name of operating system starts with "Linux CentOS 7") then (exists package "cbsensor" of rpm) else false
Used in 4 fixlets and 1 analsis   * Results in a true/false
Show indented relevance
(windows of operating system) OR (exists match (regex "Linux CentOS (6|7)") of name of operating system) OR ((name of operating system starts with "Linux Red Hat") AND (exists file "/etc/redhat-release" whose (exists line whose (exists match (regex "Red Hat Enterprise Linux (Client|Server|Workstation) release 6|7") of it) of it) AND NOT exists file "/etc/vmware-release" whose (exists line whose (it contains "VMware ESX") of it) AND NOT exists file "/etc/enterprise-release" whose (exists line whose (it contains "Enterprise Linux Enterprise Linux") of it)))

Actions

Action 1 (default)

Action Link Click here to deploy this action.
Script Type BigFix Action Script
if {windows of operating system}
    waithidden {(if it ends with "%00" then preceding text of first "%00" of it else it) of (value "UninstallString" of key whose (value "DisplayName" of it = "Carbon Black Sensor") of key "HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall" of registry as string)} /quiet
elseif {(exists match (regex "Linux CentOS (6|7)") of name of operating system) OR ((name of operating system starts with "Linux Red Hat") AND (exists file "/etc/redhat-release" whose (exists line whose (exists match (regex "Red Hat Enterprise Linux (Client|Server|Workstation) release 6|7") of it) of it) AND NOT exists file "/etc/vmware-release" whose (exists line whose (it contains "VMware ESX") of it) AND NOT exists file "/etc/enterprise-release" whose (exists line whose (it contains "Enterprise Linux Enterprise Linux") of it)))}
    wait rpm -e cbsensor
endif
Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.


Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!